Cpe:2.3:a:niteothemes:cmp_coming_soon_maintenance_plugin:*:*:*:*:*:*:*:*

The CMP - Coming Soon & Maintenance Plugin is vulnerable to privilege escalation due to an unauthenticated AJAX setting import that allows authenticated editors to modify arbitrary site options.